This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/cbaJKNAhgJAhFE_4zoZbKJm5V5s.roa File: cbaJKNAhgJAhFE_4zoZbKJm5V5s.roa (raw, json) Hash identifier: Rcxed2Cw/y7WBNPlRsNkcmXlhqGDs0w++1hNx6Mbo5U= Subject key identifier: 71:B6:89:28:D0:21:80:90:21:14:4F:F8:CE:86:5B:28:99:B9:57:9B Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738 Certificate serial: 019B77C71D1FF8D53D6CC5D8EB77A5C6F0CD Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/cbaJKNAhgJAhFE_4zoZbKJm5V5s.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7979 IP address blocks: 185.83.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1d:1f:f8:d5:3d:6c:c5:d8:eb:77:a5:c6:f0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738 Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71b68928d021809021144ff8ce865b2899b9579b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:89:63:7b:1c:2b:16:eb:cf:af:37:02:39: f8:85:43:39:01:2a:d6:04:97:26:58:ff:45:0b:82: 7d:31:4f:16:e3:28:29:d3:08:87:e0:98:4a:f2:b2: a3:c7:2b:fa:f3:e3:d1:b3:62:2b:ce:e8:3c:a2:83: 10:d0:a7:db:93:d7:8a:07:3d:19:5b:5c:ba:dc:76: 14:ea:00:ac:41:ea:67:57:56:2b:96:58:ec:a6:74: 18:82:f4:61:2c:99:9c:62:c9:01:e3:4e:08:51:f9: ca:65:4e:74:eb:1a:c7:f0:00:ab:f9:7c:7c:49:c8: 4f:36:bc:f9:40:f3:b0:10:be:6c:e3:1d:59:04:99: d4:29:fa:1f:12:34:fe:44:5c:fb:45:e8:df:f3:8f: 10:b1:0c:83:e7:e0:15:be:15:5e:a9:0c:eb:ff:34: 74:51:7a:e0:19:44:53:c7:7a:18:87:91:34:28:8c: 9f:e2:a4:f4:f9:1d:50:1b:da:29:95:1f:88:95:42: 28:a2:81:cb:ef:3c:e5:13:08:a5:04:89:4e:1c:67: 8c:7e:0b:14:7f:fd:33:cb:bc:db:0d:fe:43:8f:71: 04:f9:28:e2:76:98:5c:7f:b0:97:d0:03:75:8d:72: 45:49:fa:0b:26:4d:27:ae:76:bf:75:02:07:23:7e: 04:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B6:89:28:D0:21:80:90:21:14:4F:F8:CE:86:5B:28:99:B9:57:9B X509v3 Authority Key Identifier: keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/cbaJKNAhgJAhFE_4zoZbKJm5V5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.155.0/24 Signature Algorithm: sha256WithRSAEncryption b4:bf:c7:08:6e:8f:37:7e:49:7f:8c:25:af:83:df:8a:5d:89: 02:9f:4b:af:70:6e:fe:97:3b:13:16:aa:e6:0f:04:27:0c:34: 6e:7d:d9:2f:3e:16:da:b3:54:c9:55:48:79:21:e8:24:24:23: a1:43:b3:3c:35:26:5d:b3:43:24:64:a1:7e:63:67:ef:70:90: f4:b9:72:6d:68:89:7b:91:50:0f:28:f9:35:66:b6:78:2d:0f: a1:15:01:bf:3e:17:af:54:cd:ba:dd:85:f2:04:cf:7d:2f:34: 2c:c9:09:ab:22:b2:46:04:ee:c4:9e:01:5d:0c:37:1a:8e:8a: 05:86:f3:69:b0:77:6a:5b:dc:c4:e8:87:4c:9b:2b:ac:0f:c6: 50:8b:7c:fb:b4:42:53:67:57:dc:ec:23:7a:df:df:76:41:8d: 8e:55:2d:ad:b6:a2:ff:52:f4:02:6d:09:0a:3f:df:43:a7:01: 89:80:cc:35:6a:38:57:94:68:e4:78:0a:b3:82:52:bf:d4:91: 0d:68:5a:9c:e8:92:42:ae:5d:a2:e9:e5:f8:55:24:29:52:bb: 31:9a:f8:05:ec:b1:ac:19:95:f7:65:92:d3:1a:d3:19:d1:89: 6e:72:af:9a:f5:f3:4f:05:ab:14:50:c0:50:67:e9:07:d8:3b: 99:e4:08:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xx0f+NU9bMXY63elxvDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi ZTA3MzgwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWI2ODkyOGQwMjE4MDkwMjExNDRmZjhjZTg2NWIyODk5Yjk1NzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw26JY3scKxbrz683Ajn4hUM5ASrW BJcmWP9FC4J9MU8W4ygp0wiH4JhK8rKjxyv68+PRs2Irzug8ooMQ0Kfbk9eKBz0Z W1y63HYU6gCsQepnV1YrlljspnQYgvRhLJmcYskB404IUfnKZU506xrH8ACr+Xx8 SchPNrz5QPOwEL5s4x1ZBJnUKfofEjT+RFz7Rejf848QsQyD5+AVvhVeqQzr/zR0 UXrgGURTx3oYh5E0KIyf4qT0+R1QG9oplR+IlUIoooHL7zzlEwilBIlOHGeMfgsU f/0zy7zbDf5Dj3EE+Sjidphcf7CX0AN1jXJFSfoLJk0nrna/dQIHI34EEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHG2iSjQIYCQIRRP+M6GWyiZuVebMB8GA1UdIwQY MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt ZGY4MmZhODk3MzI2LzEvY2JhSktOQWhnSkFoRkVfNHpvWmJLSm01VjVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2 LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVObMA0G CSqGSIb3DQEBCwUAA4IBAQC0v8cIbo83fkl/jCWvg9+KXYkCn0uvcG7+lzsTFqrm DwQnDDRufdkvPhbas1TJVUh5IegkJCOhQ7M8NSZds0MkZKF+Y2fvcJD0uXJtaIl7 kVAPKPk1ZrZ4LQ+hFQG/PhevVM263YXyBM99LzQsyQmrIrJGBO7EngFdDDcajooF hvNpsHdqW9zE6IdMmyusD8ZQi3z7tEJTZ1fc7CN63992QY2OVS2ttqL/UvQCbQkK P99DpwGJgMw1ajhXlGjkeAqzglK/1JENaFqc6JJCrl2i6eX4VSQpUrsxmvgF7LGs GZX3ZZLTGtMZ0Ylucq+a9fNPBasUUMBQZ+kH2DuZ5AhK -----END CERTIFICATE-----Generated at Sun Jan 25 10:07:39 2026 by rpki-client